@levr-one/auth 1.0.0

package/dist/workspace-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-store.test.js","sourceRoot":"","sources":["../src/workspace-store.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,sDAAsD;AACtD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAEjD,2EAA2E;AAC3E,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC7D,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,4DAA4D;AAC5D,IAAI,aAAkE,CAAC;AACvE,IAAI,aAAkE,CAAC;AACvE,IAAI,cAAoE,CAAC;AACzE,IAAI,oBAAgF,CAAC;AACrF,IAAI,iBAA0E,CAAC;AAC/E,IAAI,iBAA0E,CAAC;AAE/E,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACrE,EAAE,CAAC,YAAY,EAAE,CAAC;IAClB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACjD,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;IAClC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;IAClC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IACpC,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAChD,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAC1C,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,IAAI,CACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,gBAAgB,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CACnC,CAAC;QACF,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,yDAAyD;QACzD,MAAM,OAAO,GAAG,oBAAoB,EAAE,GAAG,MAAM,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,cAAc,EAAE,CAAC;QACjB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,MAAM,MAAM,GAAG;QACb,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,qBAAqB;QACjC,SAAS,EAAE,aAAa;QACxB,IAAI,EAAE,OAAO;KACd,CAAC;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC;YAClC,GAAG,MAAM;YACT,YAAY,EAAE,MAAM;YACpB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,oBAAoB,EAAE,GAAG,MAAM,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,uEAAuE;QACvE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,SAAS;YACrB,oBAAoB;YACpB,IAAI,EAAE,OAAO;SACd,CAAC,CACH,CAAC;QACF,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,OAAO;SACd,CAAC,CACH,CAAC;QACF,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CACrE,CAAC;QACF,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/workspaces.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Workspace listing — public library surface for `@levr-one/auth`.
+ *
+ * Promotes the CLI's former private `fetchWorkspaceSites()` into a reusable
+ * library function (internal / D2). Consumed by `@levr-one/setup` and any other
+ * embedder of `@levr-one/auth`.
+ *
+ * IMPORTANT (internal / R2F1): a public library function must NEVER terminate
+ * its caller's process. Where the old CLI-private helper terminated the process
+ * on auth/HTTP-error branches, `listWorkspaces()` instead throws a typed
+ * `WorkspaceFetchError`. Process termination + user-facing stderr messaging live
+ * in the CLI wrapper (`cli.ts`), which catches this error.
+ */
+/**
+ * A workspace (site) the authenticated user has access to.
+ *
+ * This shape mirrors the backend contract exactly — `siteItemSchema` in
+ * `apps/backender/src/auth/dto/sites-response.dto.ts`, backing
+ * `GET /v1/auth/sites`. (internal / audit H1: the former client-side interface
+ * had drifted — it was missing `user_id`/`role`/`last_accessed_at`, carried a
+ * dead/misnamed `url_key`, and had a nonexistent `id`. All corrected here.)
+ */
+export interface WorkspaceSite {
+    workspace_id: string;
+    workspace_name: string;
+    workspace_url_key: string;
+    user_id: string;
+    role: 'owner' | 'admin' | 'member' | 'guest';
+    is_primary: boolean;
+    last_accessed_at: string | null;
+}
+/** Why a `listWorkspaces()` call failed — lets callers format their own messaging. */
+export type WorkspaceFetchErrorCode = 'not_authenticated' | 'token_refresh_failed' | 'http_error';
+/**
+ * Thrown by `listWorkspaces()` instead of terminating the process. Carries a
+ * machine-readable `code` and, for HTTP failures, the response `status`/`body`.
+ */
+export declare class WorkspaceFetchError extends Error {
+    readonly code: WorkspaceFetchErrorCode;
+    readonly status?: number;
+    readonly body?: string;
+    constructor(code: WorkspaceFetchErrorCode, message: string, options?: {
+        status?: number;
+        body?: string;
+    });
+}
+/**
+ * List the workspaces (sites) the authenticated user has access to.
+ *
+ * Resolves the env/client from the persisted `~/.tq/config.json` (via
+ * `loadConfig()`), loads the stored tokens, refreshes if needed, and calls
+ * `GET /v1/auth/sites`.
+ *
+ * @throws {WorkspaceFetchError} `not_authenticated` if no tokens are stored,
+ *   `token_refresh_failed` if the access token can't be obtained/refreshed, or
+ *   `http_error` (carrying `status`/`body`) on a non-2xx response. Never
+ *   terminates the process.
+ */
+export declare function listWorkspaces(): Promise<WorkspaceSite[]>;
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../src/workspaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC7C,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,sFAAsF;AACtF,MAAM,MAAM,uBAAuB,GAC/B,mBAAmB,GACnB,sBAAsB,GACtB,YAAY,CAAC;AAEjB;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAGrB,IAAI,EAAE,uBAAuB,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;CAQ/C;AAQD;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CA6C/D"}

package/dist/workspaces.js

@@ -0,0 +1,80 @@
+/**
+ * Workspace listing — public library surface for `@levr-one/auth`.
+ *
+ * Promotes the CLI's former private `fetchWorkspaceSites()` into a reusable
+ * library function (internal / D2). Consumed by `@levr-one/setup` and any other
+ * embedder of `@levr-one/auth`.
+ *
+ * IMPORTANT (internal / R2F1): a public library function must NEVER terminate
+ * its caller's process. Where the old CLI-private helper terminated the process
+ * on auth/HTTP-error branches, `listWorkspaces()` instead throws a typed
+ * `WorkspaceFetchError`. Process termination + user-facing stderr messaging live
+ * in the CLI wrapper (`cli.ts`), which catches this error.
+ */
+import { OAuthClient } from './oauth-client.js';
+import { loadTokens } from './token-store.js';
+import { loadConfig } from './config.js';
+/**
+ * Thrown by `listWorkspaces()` instead of terminating the process. Carries a
+ * machine-readable `code` and, for HTTP failures, the response `status`/`body`.
+ */
+export class WorkspaceFetchError extends Error {
+    code;
+    status;
+    body;
+    constructor(code, message, options) {
+        super(message);
+        this.name = 'WorkspaceFetchError';
+        this.code = code;
+        this.status = options?.status;
+        this.body = options?.body;
+    }
+}
+/**
+ * List the workspaces (sites) the authenticated user has access to.
+ *
+ * Resolves the env/client from the persisted `~/.tq/config.json` (via
+ * `loadConfig()`), loads the stored tokens, refreshes if needed, and calls
+ * `GET /v1/auth/sites`.
+ *
+ * @throws {WorkspaceFetchError} `not_authenticated` if no tokens are stored,
+ *   `token_refresh_failed` if the access token can't be obtained/refreshed, or
+ *   `http_error` (carrying `status`/`body`) on a non-2xx response. Never
+ *   terminates the process.
+ */
+export async function listWorkspaces() {
+    const stored = loadTokens();
+    if (!stored) {
+        throw new WorkspaceFetchError('not_authenticated', 'Not logged in.');
+    }
+    const config = loadConfig();
+    const authServerUrl = config.apiUrl;
+    const client = new OAuthClient({
+        clientId: config.oauthClientId,
+        authServerUrl,
+    });
+    // The OAuthClient constructor only loads tokens lazily via the disk path.
+    // Seed it with the freshly-loaded tokens so getAccessToken() can refresh
+    // (or use) them instead of throwing "No access token available".
+    client.setTokensFromStorage(stored);
+    let token;
+    try {
+        token = await client.getAccessToken();
+    }
+    catch {
+        throw new WorkspaceFetchError('token_refresh_failed', 'Token expired and refresh failed.');
+    }
+    const url = new URL('/v1/auth/sites', authServerUrl);
+    const res = await fetch(url.toString(), {
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new WorkspaceFetchError('http_error', `Failed to fetch workspaces (${res.status}).`, { status: res.status, body });
+    }
+    // Backend returns { sites: [...], current_workspace_id: "..." }.
+    // Tolerate older bare-array responses for forward compat.
+    const data = (await res.json());
+    return Array.isArray(data) ? data : (data.sites ?? []);
+}
+//# sourceMappingURL=workspaces.js.map

package/dist/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../src/workspaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA2BzC;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAA0B;IAC9B,MAAM,CAAU;IAChB,IAAI,CAAU;IAEvB,YACE,IAA6B,EAC7B,OAAe,EACf,OAA4C;QAE5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;IAC5B,CAAC;CACF;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,aAAa;QAC9B,aAAa;KACd,CAAC,CAAC;IACH,0EAA0E;IAC1E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAEpC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAC3B,sBAAsB,EACtB,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,+BAA+B,GAAG,CAAC,MAAM,IAAI,EAC7C,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAC7B,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,0DAA0D;IAC1D,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;IAC3E,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/workspaces.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workspaces.test.d.ts.map

package/dist/workspaces.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.test.d.ts","sourceRoot":"","sources":["../src/workspaces.test.ts"],"names":[],"mappings":""}

package/dist/workspaces.test.js

@@ -0,0 +1,111 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { listWorkspaces, WorkspaceFetchError } from './workspaces.js';
+// --- Module mocks -----------------------------------------------------------
+const mockLoadTokens = vi.fn();
+const mockGetAccessToken = vi.fn();
+const mockSetTokensFromStorage = vi.fn();
+vi.mock('./token-store.js', () => ({
+    loadTokens: () => mockLoadTokens(),
+}));
+vi.mock('./config.js', () => ({
+    loadConfig: () => ({
+        environment: 'staging',
+        apiUrl: 'https://api.example.test',
+        authUrl: 'https://auth.example.test',
+        clientUrl: 'https://app.example.test',
+        oauthClientId: 'test-client',
+    }),
+}));
+vi.mock('./oauth-client.js', () => ({
+    OAuthClient: class {
+        setTokensFromStorage = mockSetTokensFromStorage;
+        getAccessToken = () => mockGetAccessToken();
+    },
+}));
+const FAKE_TOKENS = {
+    accessToken: 'a',
+    refreshToken: 'r',
+    expiresAt: Date.now() + 60_000,
+};
+const SITE = {
+    workspace_id: '019f0000-0000-7000-8000-000000000001',
+    workspace_name: 'Acme',
+    workspace_url_key: 'acme',
+    user_id: '019f0000-0000-7000-8000-0000000000aa',
+    role: 'owner',
+    is_primary: true,
+    last_accessed_at: null,
+};
+describe('listWorkspaces', () => {
+    let exitSpy;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        mockGetAccessToken.mockResolvedValue('access-token');
+        // Guard: the library must NEVER terminate the caller's process (R2F1).
+        exitSpy = vi
+            .spyOn(process, 'exit')
+            .mockImplementation((() => undefined));
+    });
+    afterEach(() => {
+        exitSpy.mockRestore();
+        vi.unstubAllGlobals();
+    });
+    it('throws (does not process.exit) when not authenticated — R2F1', async () => {
+        mockLoadTokens.mockReturnValue(null);
+        await expect(listWorkspaces()).rejects.toBeInstanceOf(WorkspaceFetchError);
+        await expect(listWorkspaces()).rejects.toMatchObject({
+            code: 'not_authenticated',
+        });
+        expect(exitSpy).not.toHaveBeenCalled();
+    });
+    it('throws token_refresh_failed (not exit) when the token cannot be obtained', async () => {
+        mockLoadTokens.mockReturnValue(FAKE_TOKENS);
+        mockGetAccessToken.mockRejectedValue(new Error('refresh failed'));
+        await expect(listWorkspaces()).rejects.toMatchObject({
+            code: 'token_refresh_failed',
+        });
+        expect(exitSpy).not.toHaveBeenCalled();
+    });
+    it('throws http_error carrying status/body on a non-2xx response', async () => {
+        mockLoadTokens.mockReturnValue(FAKE_TOKENS);
+        vi.stubGlobal('fetch', vi.fn().mockResolvedValue({
+            ok: false,
+            status: 403,
+            text: () => Promise.resolve('forbidden'),
+        }));
+        const err = await listWorkspaces().catch((e) => e);
+        expect(err).toBeInstanceOf(WorkspaceFetchError);
+        expect(err).toMatchObject({
+            code: 'http_error',
+            status: 403,
+            body: 'forbidden',
+        });
+        expect(exitSpy).not.toHaveBeenCalled();
+    });
+    it('unwraps the { sites } envelope and returns the corrected WorkspaceSite shape', async () => {
+        mockLoadTokens.mockReturnValue(FAKE_TOKENS);
+        vi.stubGlobal('fetch', vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve({
+                sites: [SITE],
+                current_workspace_id: SITE.workspace_id,
+            }),
+        }));
+        const sites = await listWorkspaces();
+        expect(sites).toHaveLength(1);
+        expect(sites[0]).toEqual(SITE);
+        // H1: role/user_id/last_accessed_at are part of the typed surface.
+        expect(sites[0].role).toBe('owner');
+        expect(sites[0].user_id).toBeDefined();
+    });
+    it('tolerates a bare-array response for forward compat', async () => {
+        mockLoadTokens.mockReturnValue(FAKE_TOKENS);
+        vi.stubGlobal('fetch', vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve([SITE]),
+        }));
+        const sites = await listWorkspaces();
+        expect(sites).toEqual([SITE]);
+    });
+});
+//# sourceMappingURL=workspaces.test.js.map

package/dist/workspaces.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.test.js","sourceRoot":"","sources":["../src/workspaces.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAItE,+EAA+E;AAC/E,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;AAC1D,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,EAAyB,CAAC;AAC1D,MAAM,wBAAwB,GAAG,EAAE,CAAC,EAAE,EAAkC,CAAC;AAEzE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE;CACnC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACjB,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,2BAA2B;QACpC,SAAS,EAAE,0BAA0B;QACrC,aAAa,EAAE,aAAa;KAC7B,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,WAAW,EAAE;QACX,oBAAoB,GAAG,wBAAwB,CAAC;QAChD,cAAc,GAAG,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;KAC7C;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,WAAW,GAAG;IAClB,WAAW,EAAE,GAAG;IAChB,YAAY,EAAE,GAAG;IACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;CAC/B,CAAC;AAEF,MAAM,IAAI,GAAkB;IAC1B,YAAY,EAAE,sCAAsC;IACpD,cAAc,EAAE,MAAM;IACtB,iBAAiB,EAAE,MAAM;IACzB,OAAO,EAAE,sCAAsC;IAC/C,IAAI,EAAE,OAAO;IACb,UAAU,EAAE,IAAI;IAChB,gBAAgB,EAAE,IAAI;CACvB,CAAC;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,OAAqB,CAAC;IAE1B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,kBAAkB,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QACrD,uEAAuE;QACvE,OAAO,GAAG,EAAE;aACT,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;aACtB,kBAAkB,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAU,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,WAAW,EAAE,CAAC;QACtB,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAC3E,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YACnD,IAAI,EAAE,mBAAmB;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5C,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAElE,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YACnD,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5C,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACxB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;SACzC,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;YACxB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5C,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACxB,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CACT,OAAO,CAAC,OAAO,CAAC;gBACd,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,oBAAoB,EAAE,IAAI,CAAC,YAAY;aACxC,CAAC;SACL,CAAC,CACH,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,mEAAmE;QACnE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5C,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACxB,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;SACpC,CAAC,CACH,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@levr-one/auth",
+  "version": "1.0.0",
+  "description": "Shared OAuth 2.1 client with self-healing token management for TQ MCP servers",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "type": "module",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "typecheck": "tsgo --noEmit",
+    "lint:ts": "eslint src/**/*.ts --no-warn-ignored",
+    "lint:format": "prettier --check \"src/**/*.ts\"",
+    "lint": "npm-run-all --parallel \"lint:*\"",
+    "format": "prettier --write \"src/**/*.ts\"",
+    "test": "vitest run",
+    "test:unit": "vitest run",
+    "test:watch": "vitest",
+    "precommit": "tsc"
+  },
+  "dependencies": {
+    "open": "^10.1.0"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.18.0",
+    "@types/node": "^20.0.0",
+    "@typescript/tsgo": "npm:@typescript/native-preview@^7.0.0-dev.20260113.1",
+    "eslint": "^9.18.0",
+    "globals": "^16.0.0",
+    "npm-run-all": "^4.1.5",
+    "prettier": "^3.4.2",
+    "typescript": "^5.0.0",
+    "typescript-eslint": "^8.20.0",
+    "vitest": "^4.1.0-beta.2"
+  },
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "source": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/BitModern/levr.git",
+    "directory": "packages/auth"
+  },
+  "bugs": {
+    "url": "https://github.com/BitModern/levr/issues"
+  },
+  "homepage": "https://github.com/BitModern/levr/tree/main/packages/auth#readme"
+}